Static task
static1
Behavioral task
behavioral1
Sample
bb1cd6140eebc3f056f07b4780b24bc5e816e56ff20448ba8d620f17721041bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb1cd6140eebc3f056f07b4780b24bc5e816e56ff20448ba8d620f17721041bb.exe
Resource
win10v2004-20220812-en
General
-
Target
bb1cd6140eebc3f056f07b4780b24bc5e816e56ff20448ba8d620f17721041bb
-
Size
176KB
-
MD5
2dcae5809a08b726f3e700d8d8e4018b
-
SHA1
ec62e1abcc9ae8a1c8cfd268bb969829d47db26e
-
SHA256
bb1cd6140eebc3f056f07b4780b24bc5e816e56ff20448ba8d620f17721041bb
-
SHA512
e2d3c270311c38a1883b5a17a6ff0fa2a17cc4f5b8d65f6500875895850a3d9ccd89953413adfb3ac84dd0c67b539daaf0de015c1e5af541a10dcb965f42d28a
-
SSDEEP
3072:YN2XozS8PkJkjXFBMdaAyyEJf7ZGsLskx/ocoo6yPfX:YNtS4k2j1UBuf7Zcmh6y
Malware Config
Signatures
Files
-
bb1cd6140eebc3f056f07b4780b24bc5e816e56ff20448ba8d620f17721041bb.exe windows x86
89b6a7cc8e97df1b26e4c1614704e8dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
lstrlenA
CreateProcessA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetCurrentProcess
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetFilePointer
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
wsprintfA
advapi32
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PACK Size: 144KB - Virtual size: 380KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE